Space Pirates APT IOCs - Part 2

Positive Technologies зафиксировали новую волну атак хакерской группировки Space Pirates.

Основными целями злоумышленников по-прежнему являются шпионаж и кража конфиденциальной информации. Однако Space Pirates расширила географию атак и сферу своих интересов. В России за год атакованы по крайней мере 16 организаций, а в Сербии — одна. Среди новых жертв нам удалось выявить государственные и образовательные учреждения, охранные предприятия, предприятия авиационной, ракетно-космической и сельскохозяйственной промышленности, военно-промышленного и топливно-энергетического комплекса и компании, занимающиеся информационной безопасностью в России и Сербии.

Сетевая инфраструктура Space Pirates по-прежнему задействует небольшое количество IP-адресов, на которые указывают DDNS-домены. Кроме того, злоумышленники часто переиспользуют старые адреса сайтов, создавая на них домены более высокого уровня (например, вида ruclient.dns04.com.ruclient.dns04.com).

Группировка также начала использовать ВПО ShadowPad.

Indicators of Compromise

Domains

0077.x24hr.com
123q4wfbs.staticd.dynamic-dns.net
1cnet.changeip.co
aace.zzux.com
ablank.ddnsfree.com
accountsupport.ftp1.biz
ace1.dynamic-dns.net
add.srv.xxxy.biz
ade.aace.zzux.com
adm.outlook.onmypc.net
adn.aace.zzux.com
aeo.dotnet.almostmy.com
aep.winsvr.lflinkup.org
afa.aace.zzux.com
afd.aace.zzux.com
afm.dotnet.almostmy.com
afp.anp.ddns.ms
agdfyvkiyrgyauhfjdf.journal.itsaol.com
alex.dnset.com
am.jex.ddns.us
amazon-corp.wikaba.com
another.journal.itsaol.com
anp.aace.zzux.com
anp.ddns.ms
ans.itissohard.journal.itsaol.com
apd.anp.ddns.ms
api.microft.dynssl.com
api.reportsearch.dynamic-dns.net
app.anp.ddns.ms
apple-corp.changeip.org
areyoufuckingkiddingme.staticd.dynamic-dns.net
aro.noon.wikaba.com
as.amazon-corp.wikaba.com
asb.anp.ddns.ms
asd.powergame.0077.x24hr.com
asd3.as.amazon-corp.wikaba.com
asdfas.w3.oldvideo.longmusic.com
asrweer.amazon-corp.wikaba.com
asu.noon.wikaba.com
atec.dnset.com
ato.dotnet.almostmy.com
ato.jex.ddns.us
au.dotnet.almostmy.com
au.serviechelp.changeip.us
auca.py.dns04.com
ava.anp.ddns.ms
azx.aace.zzux.com
ba.tu.qpoe.com
back.serviechelp.changeip.us
bamo.ocry.com
bba.dns04.com
bca.aace.zzux.com
beachdrivingfun.com
beachdrivingfun.comsnn3.mhysl.org
bel.dynamicdns.edns.biz
bin.anp.ddns.ms
bin.bba.dns04.com
bin.faz.dynamic-dns.net
bit.chdsjjkrazomg.dhcp.biz
blog.beachdrivingfun.com
brenken.dotnet.almostmy.com
brrkst.dynamic-dns.net
bz.py.dns04.com
cai.wulatula.xxxy.biz
cba.anp.ddns.ms
cch.noon.xxxy.biz
cchp.aace.zzux.com
cchp.wulatula.xxxy.biz
cdnsvc.microft.dynssl.com
chdsjjkrazomg.dhcp.biz
chip.noon.dns04.com
chip.serviechelp.changeip.us
chrome.py.dns04.com
ciii.chdsjjkrazomg.dhcp.biz
cloud.noon.dns04.com
cmax.amazon-corp.wikaba.com
coa.noon.wikaba.com
com.loge.otzo.com
com.ruclient.dns04.com
comein.journal.itsaol.com
community.reportsearch.dynamic-dns.net
conhost.reportsearch.dynamic-dns.net
contact.chdsjjkrazomg.dhcp.biz
cood.serviechelp.changeip.us
crc.jex.ddns.us
crc.noon.wikaba.com
crc.noon.xxxy.biz
cro.src.ssl443.org
cstg.jmjejij.otzo.com
cstg.tu.wwwhost.us
cstg.wula.zzux.com
cumulative.dotnet.almostmy.com
dba.aace.zzux.com
dbb.anp.ddns.ms
didle.staticd.dynamic-dns.net
digital.brrkst.dynamic-dns.net
dm.jex.ddns.us
dmz.jex.ddns.us
dnmd.0077.x24hr.com
dns04.com.ruclient.dns04.com
dnsfind.reportsearch.dynamic-dns.net
dnsinfo.microft.dynssl.com
docs.ace1.dynamic-dns.net
docs.atec.dnset.com
docs.bba.dns04.com
docs.jmjejij.otzo.com
docs.microft.dynssl.com
dotnet.almostmy.com
dr.journal.itsaol.com
dt.staticd.dynamic-dns.net
dttd.chdsjjkrazomg.dhcp.biz
dttd.serviechelp.changeip.us
dwm.dotnet.almostmy.com
dynamicdns.edns.biz
edge.microft.dynssl.com
edu.jex.ddns.us
ee.chdsjjkrazomg.dhcp.biz
ee.mktoon.ftp1.biz
eeee.chdsjjkrazomg.dhcp.biz
eeee.mktoon.ftp1.biz
emv1.beachdrivingfun.com
erdcserver.microft.dynssl.com
erdserver.microft.dynssl.com
eset.zzux.com
etonlkk.chdsjjkrazomg.dhcp.biz
exam.bba.dns04.com
exam.faz.dynamic-dns.net
exam.reportsearch.dynamic-dns.net
exec.anp.ddns.ms
exowa.microft.dynssl.com
fa.anp.ddns.ms
fand.faz.dynamic-dns.net
fas.anp.ddns.ms
faugi.1cnet.changeip.co
faugi.py.dns04.com
faz.dynamic-dns.net
faz.faz.dynamic-dns.net
fcc.noon.xxxy.biz
fcc.src.ssl443.org
fera.aace.zzux.com
fgjhkergvlimdfg2.wikaba.com
fileserverrt.reportsearch.dynamic-dns.net
final.staticd.dynamic-dns.net
finallyd.youthinkyouaredecent.oldvideo.longmusic.com
find.mktoon.ftp1.biz
find.serviechelp.changeip.us
findanswer123.tk
first.srv.xxxy.biz
fly.chdsjjkrazomg.dhcp.biz
flyme.oldvideo.longmusic.com
foc.jex.ddns.us
follme.www.amazon-corp.wikaba.com
forgodsake.oldvideo.longmusic.com
forsafeconcern.journal.itsaol.com
freewula.strangled.net
fssprus.dns04.com
ftp.1cnet.changeip.co
ftp.aace.zzux.com
ftp.accountsupport.ftp1.biz
ftp.amazon-corp.wikaba.com
ftp.anp.ddns.ms
ftp.apple-corp.changeip.org
ftp.bba.dns04.com
ftp.dotnet.almostmy.com
ftp.faz.dynamic-dns.net
ftp.jmjejij.otzo.com
ftp.journal.itsaol.com
ftp.miche.justdied.com
ftp.microft.dynssl.com
ftp.nvidia.freewww.biz
ftp.oldvideo.longmusic.com
ftp.rt.ftp1.biz
ftp.staticd.dynamic-dns.net
ftp.werwesf.dynamic-dns.net
ftp.winsvr.lflinkup.org
ftp.wula.zzux.com
fucker.www.amazon-corp.wikaba.com
fuckinglifs.journal.itsaol.com
fx.anp.ddns.ms
ggt.jmjejij.otzo.com
ggt.wula.zzux.com
go.staticd.dynamic-dns.net
gofuckyourself.amazon-corp.wikaba.com
google.ace1.dynamic-dns.net
google.atec.dnset.com
google.winsvr.lflinkup.org
google.wula.zzux.com
google.wulatula.xxxy.biz
goole.faz.dynamic-dns.net
goon.oldvideo.longmusic.com
gooz.noon.dns04.com
gov.ace1.dynamic-dns.net
gov.atec.dnset.com
gov.jmjejij.otzo.com
gov.noon.xxxy.biz
gov.winsvr.lflinkup.org
gov.wula.zzux.com
gov.wulatula.xxxy.biz
govnmer.0077.x24hr.com
grcc.winsvr.lflinkup.org
h.mktoon.ftp1.biz
heavsick.staticd.dynamic-dns.net
hello.noon.dns04.com
hello.serviechelp.changeip.us
help.chdsjjkrazomg.dhcp.biz
help.mktoon.ftp1.biz
help.noon.dns04.com
help.noon.xxxy.biz
hignland.oldvideo.longmusic.com
homeportal.reportsearch.dynamic-dns.net
hop.mktoon.ftp1.biz
hostname.reportsearch.dynamic-dns.net
hq.faz.dynamic-dns.net
httpproxy.reportsearch.dynamic-dns.net
hug.noon.dns04.com
hv.dotnet.almostmy.com
hyataung.duckdns.org
int.jex.ddns.us
int.noon.wikaba.com
it.jmjejij.otzo.com
itissohard.journal.itsaol.com
jc.chdsjjkrazomg.dhcp.biz
jex.ddns.us
jinj.faz.dynamic-dns.net
jjton.srv.xxxy.biz
jmjejij.otzo.com
join.chdsjjkrazomg.dhcp.biz
join.mktoon.ftp1.biz
join.noon.dns04.com
join.srv.xxxy.biz
joodte.serviechelp.changeip.us
journal.itsaol.com
js.journal.itsaol.com
juice.mktoon.ftp1.biz
jujic.dotnet.almostmy.com
ka.wula.zzux.com
kami.atec.dnset.com
kami.wulatula.xxxy.biz
kamishi.wulatula.xxxy.biz
kana.mktoon.ftp1.biz
kana.serviechelp.changeip.us
katana.serviechelp.changeip.us
kingkong.amazon-corp.wikaba.com
knowledge.reportsearch.dynamic-dns.net
kono.noon.dns04.com
kv.aace.zzux.com
ladyboy.journal.itsaol.com
lan.anp.ddns.ms
lan.faz.dynamic-dns.net
lan.noon.dns04.com
lan.src.ssl443.org
land.faz.dynamic-dns.net
last.mktoon.ftp1.biz
lb.brrkst.dynamic-dns.net
lcd.noon.xxxy.biz
lck.gigabitdate.com
le.bba.dns04.com
life.serviechelp.changeip.us
like.serviechelp.changeip.us
like.srv.xxxy.biz
likeit.chdsjjkrazomg.dhcp.biz
lin.aace.zzux.com
lin.bba.dns04.com
link.serviechelp.changeip.us
live.serviechelp.changeip.us
localmsk.reportsearch.dynamic-dns.net
log.mktoon.ftp1.biz
loge.otzo.com
lonely.chdsjjkrazomg.dhcp.biz
lt.wulatula.xxxy.biz
mail.0077.x24hr.com
mail.anp.ddns.ms
mail.mktoon.ftp1.biz
mail.playdr2.com
mail.serviechelp.changeip.us
mail.tstartel.org
mail.werwesf.dynamic-dns.net
mail1.serviechelp.changeip.us
mail2.serviechelp.changeip.us
mailend.dotnet.almostmy.com
mailend.srv.xxxy.biz
make.bba.dns04.com
mcc.brrkst.dynamic-dns.net
mcx.jex.ddns.us
mdt.srv.xxxy.biz
mf.noon.xxxy.biz
mgi.faz.dynamic-dns.net
mgimo.1cnet.changeip.co
mgo.bba.dns04.com
mgo.dynamicdns.edns.biz
mgo.jex.ddns.us
miche.justdied.com
micro.dns04.com
microft.dynssl.com
min.brrkst.dynamic-dns.net
mjejij.otzo.com
mktoon.ftp1.biz
mmmg.chdsjjkrazomg.dhcp.biz
mohana.casacam.net
moon.mktoon.ftp1.biz
mor.noon.wikaba.com
mp.noon.dns04.com
msk.chdsjjkrazomg.dhcp.biz
msk.noon.dns04.com
msk.serviechelp.changeip.us
msu.anp.ddns.ms
nb.dotnet.almostmy.com
neg.src.ssl443.org
nei.ace1.dynamic-dns.net
nei.jmjejij.otzo.com
news.flashplayeractivex.info
ng.noon.xxxy.biz
noo.noon.wikaba.com
noon.dns04.com
noon.wikaba.com
noon.xxxy.biz
npl.dynamicdns.edns.biz
ns.mktoon.ftp1.biz
ns02.dynamicdns.edns.biz
ns05.reportsearch.dynamic-dns.net
ns2.gamepoer7.com
ns9.mcafee-update.com
nvidia.freewww.biz
nvidia.nvidia.freewww.biz
nz.wulatula.xxxy.biz
ohk.journal.itsaol.com
ohyeah.dnmd.0077.x24hr.com
ohyigaga.oldvideo.longmusic.com
oka.faz.dynamic-dns.net
oldfucl.oldvideo.longmusic.com
oldvideo.longmusic.com
olga.winsvr.lflinkup.org
one.bba.dns04.com
onetwo.mktoon.ftp1.biz
opk.anp.ddns.ms
opt.bba.dns04.com
orl.jex.ddns.us
outlook.onmypc.net
pdd.jmjejij.otzo.com
person.serviechelp.changeip.us
pgs.dotnet.almostmy.com
pop.playdr2.com
pornhub.journal.itsaol.com
powergame.0077.x24hr.com
ppt.jmjejij.otzo.com
pre.noon.wikaba.com
prime.1cnet.changeip.co
pro.winsvr.lflinkup.org
proryv2020.1cnet.changeip.co
psq.jex.ddns.us
pul.dynamicdns.edns.biz
py.dns04.com
ram.noon.wikaba.com
reportsearch.dynamic-dns.net
rest.bba.dns04.com
rid.serviechelp.changeip.us
romis.wulatula.xxxy.biz
rosgvard.py.dns04.com
rov.anp.ddns.ms
rov.dotnet.almostmy.com
rov.noon.dns04.com
rov.noon.wikaba.com
rov.noon.xxxy.biz
rox.noon.wikaba.com
roz.noon.wikaba.com
rt.ftp1.biz
ru.serviechelp.changeip.us
ru5.fljsm.com
ruclient.dns04.com
ruclient.dns04.com.ruclient.dns04.com
sacere.youthinkyouaredecent.oldvideo.longmusic.com
sdo.microft.dynssl.com
seao.jex.ddns.us
search.microft.dynssl.com
secured02b-support.ftp1.biz
serv.mktoon.ftp1.biz
serv.serviechelp.changeip.us
server.chdsjjkrazomg.dhcp.biz
service.mktoon.ftp1.biz
service.noon.dns04.com
service.serviechelp.changeip.us
serviechelp.changeip.us
seven.chdsjjkrazomg.dhcp.biz
shareddocs.microft.dynssl.com
shirt.ftp1.biz
sim.anp.ddns.ms
skvm.serviechelp.changeip.us
sms.serviechelp.changeip.us
smsreport.microft.dynssl.com
somuch.amazon-corp.wikaba.com
south.chdsjjkrazomg.dhcp.biz
spb.winsvr.lflinkup.org
speedtest.reportsearch.dynamic-dns.net
sprfilet.microft.dynssl.com
src.ssl443.org
srcier0wqesj1.microft.dynssl.com
srv.xxxy.biz
sslvpn.microft.dynssl.com
staticd.dynamic-dns.net
stmspeedtest.reportsearch.dynamic-dns.net
stp.noon.xxxy.biz
surender.mktoon.ftp1.biz
svhostlit.reportsearch.dynamic-dns.net
sy.noon.wikaba.com
szuunet.strangled.net
ta.noon.xxxy.biz
tach.anp.ddns.ms
talk.noon.dns04.com
task.noon.dns04.com
tataka.chdsjjkrazomg.dhcp.biz
tax.noon.xxxy.biz
tc.chdsjjkrazomg.dhcp.biz
tellmesomesotry.oldvideo.longmusic.com
test.beachdrivingfun.com
test.mktoon.ftp1.biz
test.noon.wikaba.com
third.srv.xxxy.biz
three.brrkst.dynamic-dns.net
three.dotnet.almostmy.com
tim.bba.dns04.com
tom.bba.dns04.com
tombstone.kozow.com
tongton.noon.dns04.com
toogasd.www.oldvideo.longmusic.com
toomuch.brrkst.dynamic-dns.net
toon.brrkst.dynamic-dns.net
toon.mrbasic.com
top.noon.dns04.com
touch.brrkst.dynamic-dns.net
touch.noon.dns04.com
tracertoute.reportsearch.dynamic-dns.net
tre.dynamicdns.edns.biz
tt.oldvideo.longmusic.com
tu.wula.zzux.com
two.aace.zzux.com
tx.wula.zzux.com
udp.aace.zzux.com
udp.tu.qpoe.com
uis.noon.wikaba.com
uisp.noon.xxxy.biz
up.serviechelp.changeip.us
update.flashplayeractivex.info
upi.jex.ddns.us
usi.jex.ddns.us
uua.jex.ddns.us
uuee.dotnet.almostmy.com
val.mktoon.ftp1.biz
veejayofficeds.synology.me
vimdoc.reportsearch.dynamic-dns.net
vipnet.1cnet.changeip.co
vo.wula.zzux.com
vo.wulatula.xxxy.biz
vris.chdsjjkrazomg.dhcp.biz
warp.whatzsofun.com
wbbb.oldvideo.longmusic.com
wch.anp.ddns.ms
web.miscrosaft.com
web.winsvr.lflinkup.org
webdocsshare.microft.dynssl.com
webservice.reportsearch.dynamic-dns.net
webtest.reportsearch.dynamic-dns.net
werwesf.dynamic-dns.net
wifi48-2.loyno.edu
wiki.noon.wikaba.com
win.outlook.onmypc.net
winsvr.lflinkup.org
wl.oldvideo.longmusic.com
wold.chdsjjkrazomg.dhcp.biz
woldt.srv.xxxy.biz
wood.chdsjjkrazomg.dhcp.biz
wordpress.beachdrivingfun.com
world.winsvr.lflinkup.org
wserver1.microft.dynssl.com
wula.zzux.com
wulatula.xxxy.biz
wwa1we.wbew.amazon-corp.wikaba.com
www.0077.x24hr.com
www.1cnet.changeip.co
www.aace.zzux.com
www.accountsupport.ftp1.biz
www.alex.dnset.com
www.amazon-corp.wikaba.com
www.anp.ddns.ms
www.bamo.ocry.com
www.bba.dns04.com
www.beachdrivingfun.com
www.dotnet.almostmy.com
www.elienceso.kozow.com
www.fgjhkergvlimdfg2.wikaba.com
www.journal.itsaol.com
www.loge.otzo.com
www.miche.justdied.com
www.microft.dynssl.com
www.news.flashplayeractivex.info
www.nvidia.freewww.biz
www.oldvideo.longmusic.com
www.omgod.org
www.reportsearch.dynamic-dns.net
www.rt.ftp1.biz
www.secured02b-support.ftp1.biz
www.update.flashplayeractivex.info
www.veejayofficeds.synology.me
www.winsvr.lflinkup.org
xdd.wulatula.xxxy.biz
xsy.tu.qpoe.com
xts.reportsearch.dynamic-dns.net
xx.wulatula.xxxy.biz
yand.anp.ddns.ms
ybcps4.freeddns.org
yd.wulatula.xxxy.biz
youthinkyouaredecent.oldvideo.longmusic.com
yt.journal.itsaol.com
yy.jmjejij.otzo.com
za.anp.ddns.ms
zai.aace.zzux.com
zap.bba.dns04.com
zhi.aace.zzux.com
zim.faz.dynamic-dns.net
zip.faz.dynamic-dns.net
ziz.faz.dynamic-dns.net
zmaiewrdtgfhnn.www.amazon-corp.wikaba.com
zmain.www.amazon-corp.wikaba.com
zt.wulatula.xxxy.biz
zzp.bba.dns04.com

MD5

01b596051d1fa4785ef4e73dc3f08ec0
0c19d2e8bc1429fac245dd6c870afbe0
0fa4a2b8210500427bb23d2d92502964
1a04af6c3abe8f67bf98adc588c46736
1d07e53969cd1cb34db944bfdfa5bf6f
24ec73b4e1845088a28dde0007c2d6bd
2ec55245fbe57cae1a045f9106ca709a
3381df84cf05826aff084002ba323774
38c43e589e3dc65258322d91b58e2e15
3cf999dd950af82cad3f8c6eb5430bd5
48097e614cdf1f9c908b7449cd1119c5
4db33e5390bfebd84e38cbb85b75c006
4fdb78de4da91c06e5778feb560750f4
51ca39e3700e9ed16d90302dd31f3a1d
54c7f04fc5418553812910db8adc6995
5d0aa944ce19e0a70adad562ce0e7880
5e25310d2ada344715cf8edd5e64a848
633ccb76bd17281d5288f3a5e03277a0
66e8f82a418923b92bef57ad61bcebf3
6d3ce5d4003ce4c9af3048826638ab82
6d52d0e7f49817c6315b308cb973d405
77ef4bc2f23ef97add7ec0ad229396a4
7949b560ecf60644e2b537199589d67b
7aa890406a74a44f17fe665653bd92e2
8002cd74e579a44a78b2c8e66f8f08a4
804824203f31ebfb56e580e73e932d26
81a93165b338dd5ebb59841e199e0460
81de205ac5e44e1167c0c01c7207c6c4
824fbfa8b35f19152a834a1bfff9ef54
8a7b4985db84e9093e169c237b853adc
8e3217391e11cabf6f9a62a35c636835
8ec966f8b441fa20225e08ffd5e83f94
972a1a6f17756da29d55a84d7f3f23a4
97c00cee887279f12f309a86e7bc3638
99b86ad9bf6193b044076df373534fad
9a6b1bd3b7f13d30d1595b874f513744
9faf04fc6e522050527e71dea5918d01
a2221a72d42b978c0f295557a100d574
a94277fad94ca6fbdb2b8eeb716bac90
ab6a57e40ba74135de9fc6b8f37efa7b
b0b438bcb2a71233721a2ddcdb765a68
b33e5e2e14b0fbe319f6a8b719c43c1a
c1be341ffc0f58bafdf4e5210b881106
d0ea84204096109f18a2201fae1c4f30
d217fe96c7737ac318321deafc4cd261
d4e51120c368ee4ef5f5571756803fd3
dbb5995037745e04d03dc7f2985f017f
ef4d35b1780cb1799eadb648f4e7b5b5
ef6264abe296357100e2db48820b13f6
fb23fc47484150250cfd7b1260e23524
ffc18496b2b1563e081beefc9e884769

SHA1

067ca2d961b913cb2e6d6aaa92595345125d6683
0912822548e5983f8a2b6d77848994f6d929ffed
0d0c026a1661923cd184b6d0fde647128be75488
154da55173f97c50e41e48157bc94515cc6146ec
1749f99443b345860dd037940505421c45156950
19da36d73e0a72f65c8a9f6fc2e2504ed599b57d
1a6e675d82e67cc41493ff991f99da70316848c4
1fb924ec4f0ab73a952f2a3cb624b94933275d1b
20c83bcfd9fb45a8ba5922dbefb74d47cb361db7
2404ac00114cd2481099c52b879e1776dedb2d24
28ed17b046e0bed3d1cde67eccf241ecf01fe3c4
2910415d483972cc17c76548e2b2aa5afd5bc59a
30ad2f4a758ab2c526b6439772c7cd7cee66ffc4
338881ff10434b523feb63a8a66370f444378cc7
3caf909e6590a4ae2db99ae577d5585d854ad15e
3f8ee1e875cbb01e145a09db7d857b6be22bdd92
491248fdf1141e81d5ff23eb1e44d58b50339fe2
493e89a70c4176dcec50f34b79eaa4f910e50800
57792f875625fec78bea22af46010bd34dff863a
57b138f2bb4731b1c50a034aff3013bce735267c
59239f73996a3f5a6260228cf7ca3c01e3a00822
6e0c406d07206b588652729a271e054c416b5c90
6f8cc7abbf3185a085aa43186c5da332b04c3156
7abf05ccdf0709aacae2ebe07b7104c81b19abe1
84ca568879ca62448d035d56bec816a11188b831
89375a28a96286584e321401915bff2860190470
8ef130998044df15395dcf50123e5a1d8f6ce208
99cc3349b64188aae1c986afbcee7e776aa4b349
a24d306d0ed0061485cb05901cf9fc9d5f07c097
a3225a0bbb66b5babf52466ae23a1538407f0cef
a7de9de3774ad507e7d1ddfcce4924625a600434
a8808089c37faacebc19bafd2677ba011afffc49
aa42f3758dc599e6184894a2911e774c2e16b92d
ab64d32da52a1e516b0c874aad006db404f9c21e
ac499c86012858f40eb78ecf3bcefae779527d73
af71956b59b9c05acdcd7badecc232ca6237cc8d
b85fec5a965785830af1cf5534ef6a3b437542c2
bfe05003730d79f0004cc41e09f48944df6f68fe
c055f30523028037f51cc62d25ce6d38334a531e
c321233155af13a53ecd746eaab84cc6ac69d510
c58d5d36201cee88a01c9913d771723edde302e4
c5c844582c0590cdc901c253a121568251154c61
ced02716f59a9a70c37eaf373c42796e6f3e93b0
e49d21f1e66268715efc6003c4e2d3b98cee666a
e50dc750e7697ba5e28d6dde12e9a4d370076c0c
e986b238cb5fe037718172d965a41c12c85bbdd0
ec5394b93c376e359a8a2c380622e3a9d033d0de
f4a5778b74b73745a533f22d33a65880f2968705
f95deea8d824ee681341f9457e0a86129ec4eb91
f99f5f397fe1abb3fc25cc99fe95952fe24b6123
fc6b59571353c74d4d8cbd254ea7b216f8449208

SHA256
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